
RawHive
Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data…

Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data…

Python-based exploit for CVE-2025-20260 that generates a malicious PDF file and includes core dump analysis capabilities for vulnerability…

CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)

MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped…

Create and enumerate hidden desktops.

Binary analysis and management framework

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Scan files or process memory for CobaltStrike beacons and parse their configuration

POC experiments with Volume Shadow copy Service (VSS)

Malicious HTTP traffic explorer

Powerglot encodes offensive powershell scripts using polyglots . Offensive security tool useful for stego-malware, privilege escalation, lateral…

Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250

A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
